MAL-2025-191431 Malicious code in sufetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8efd418803202b34256057a848e0e9fbd6ad735dd0a011b4e7ca9cd46d088b39 The package sufetch was found to contain malicious code. Source: ghsa-malware 96568dd37a7486f46399a553eecede4295c1c52321560fb15faaa4525e898642 Any...

Malicious code in tiptap-shadcn-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0749b2f0cf2a55c1736c46b2865d3ac1dfd6bf241b5242225513d0807ee512e The package tiptap-shadcn-vue was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191215 Malicious code in @everreal/react-charts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5768b8f3a3e5bd1a30a71e7ec2dccf1b55e7e06c7967fe7f40bb6cd938104716 The package @everreal/react-charts was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trackstar/test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f23787bf3317a1d48ff30444e506ed95b1c3242ab8092521a697181c736e960 The package @trackstar/test-package was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191321 Malicious code in @sme-ui/aoma-vevasound-metadata-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ced8f74d8984f217db135b6a331c5aeee6463823f29d90c9e15fa6473aa8fd3 The package @sme-ui/aoma-vevasound-metadata-lib was found to contain malicious code. Source: ghsa-malware...

Malicious code in @silgi/openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da37d75ae054be71f7d9d4913bf4e5b1c0e7249774278432c33d89d871d99f28 The package @silgi/openapi was found to contain malicious code. Source: ghsa-malware 3c5eda9815ba5af459be6844eab3b3e9f5cb4615e738904bd8214eb62a2c93e7...

Malicious code in @silgi/module-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dcdf459dd6f30b49693265bec20c40b3a8f9b49a11f1eef906e86ecc5741ad The package @silgi/module-builder was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-packery-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9dbf0ac814d8ad3cdd41ff8e2cebc7bf1bef909281eb89d019a8efd626d047 The package react-packery-component was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191044 Malicious code in @opentermsarchive/engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65f79ad38dfbbbddd8ec94c40721b2c951c3bf7c76de5e109d75cd20ab25bd5 The package @opentermsarchive/engine was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191039 Malicious code in @oku-ui/label (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26f863ed3157086df61430a6d4939470a4c8cbf6bca6ae11d98f34c0c2547e45 The package @oku-ui/label was found to contain malicious code. Source: ghsa-malware d98465139dc808cd01653e8f2eab11a773fcb7ce4d9e4a339cf0bb8c07c02320...

Malicious code in pergel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0beb04dcc264a7b8ea3f1b3c48c402609868184158f6bd8615a1f81fc5a29315 The package pergel was found to contain malicious code. Source: ghsa-malware 013990a2334d492668cc0d60833e3b2a30e9578b49ca1d8a75f904b5c82e1932 Any...

nitroping-react-native (>=0.2.2, <=0.2.14) potentially affected by unknown CVE via nitroping (0.2.14)

nitroping NPM version 0.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on nitroping and may be impacted: - nitroping-react-native =0.2.2, =0.2.14 Source cves: unknown CVE Source advisory: OSV:MAL-2025-191134...

MAL-2025-191134 Malicious code in nitroping (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab13b3f9a9100541d146c2728a90d45bfe20125de13d0f39196f03259918c1b9 No a static rule matches and no traced-code findings of installer-side attack behavior were produced for this package version. There is no evidence o...

Malicious code in nitro-kutu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c730e64b459919c937231de7e767a99ceca04f35011b70d3d95c5616092dead The package nitro-kutu was found to contain malicious code. Source: ghsa-malware e49eaa55b0b2cddde2728a2d6cfcc512771af0fa1cf78903a09e11d7b564d972 Any...

MAL-2025-191037 Malicious code in @oku-ui/accordion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6f4c235626fe3582ef43941e8a0317b4c3b66acee5e40dae2d246214db38e9 The package @oku-ui/accordion was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191119 Malicious code in kinvey-flex-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db8900040473f66489c468a226e662892ffd1324837d5096c33e16fc43bdd7a The package kinvey-flex-scripts was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191118 Malicious code in kinvey-cli-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd908bc42e771527ecff3b0ef336122eb8d484f23f0402f511ca30dcb7b37dc The package kinvey-cli-wrapper was found to contain malicious code. Source: ghsa-malware...

Malicious code in kinvey-cli-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd908bc42e771527ecff3b0ef336122eb8d484f23f0402f511ca30dcb7b37dc The package kinvey-cli-wrapper was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191117 Malicious code in kinetix-default-token-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834c5a1d0acc5be073a1939708bfdfdb3d38a411407c9ac4e2abebdfd44ee059 The package kinetix-default-token-list was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191115 Malicious code in just-toasty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e29f21c9b431c05fbc927b36672514aceaf4b5deb5ebfe79245aca026e11db The package just-toasty was found to contain malicious code. Source: ghsa-malware 2b112074d0da578cf13c8d773ea5076de4fdc7c11511d2af1910c9f63ba3783c An...